CVE-2025-0224

A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-200
• CWE-284

• https://netsecfish.notion.site/Sensitive-Device-Information-Disclosure-in-Provision-ISR-DVR-1626b683e67c803881befbc730a93bf6?pvs=4
• https://vuldb.com/?ctiid.290203
• https://vuldb.com/?id.290203
• https://vuldb.com/?submit.467085

Published

Jan 5, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0218When batch jobs are executed by pgAgent, a script is created…7.1
• CVE-2025-0219A vulnerability, which was classified as problematic, has be…5.1
• CVE-2025-0220A vulnerability, which was classified as problematic, was fo…5.1
• CVE-2025-0221A vulnerability has been found in IOBit Protected Folder up …5.5
• CVE-2025-0222A vulnerability was found in IObit Protected Folder up to 13…5.5
• CVE-2025-0223A vulnerability was found in IObit Protected Folder up to 13…5.5
• CVE-2025-0225A vulnerability classified as problematic was found in Tsing…5.3
• CVE-2025-0226A vulnerability, which was classified as problematic, has be…5.3
• CVE-2025-0227A vulnerability, which was classified as problematic, was fo…5.3
• CVE-2025-0228A vulnerability has been found in code-projects Local Storag…4.8
• CVE-2025-0229A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-0230A vulnerability, which was classified as critical, was found…9.8